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LOGICAL PARTITIONING IN REDUNDANT SYSTEMS 
BACKGROUND 

1. Field 

5 [0001] The present disclosure relates to a method, system, and an article of manufacture 
for logical partitioning in redundant systems. 

2. Description of Related Art 

[0002] Redundant information technology systems, including storage systems, may 

10 store the same data in multiple nodes, where a node may be a computational unit, a 

storage unit, etc. When one node of a redundant system is unavailable, an alternate node 
of the redundant system may be used to substitute the unavailable node. 
[0003] An enterprise storage server (ESS), such as the IBM* TotalStorage Enterprise 
Storage Server*, may be a disk storage server that includes one or more processors 

15 coupled to storage devices, including high capacity scalable storage devices, Redundant 
Array of Independent Disks (RAID), etc. The ESS may be connected to a network and 
include features for copying data in storage systems. An ESS that includes a plurality of 
nodes, where a node may have a plurality of processors, may be used as a redundant 
information technology system. 

20 [0004] In ESS units that have a plurality of nodes, a pair of nodes may provide 

redundancy. For example, one node may be referred to as a primary node and another 
node may be referred to as a secondary node. If the primary node fails, the secondary 
node takes over and performs the functions of the primary node. 
[0005] In many redundant systems that use a primary node and a secondary node to 

25 provide redundancy, entire nodes may fail. However, the failure of an entire node, 

especially in situations where the failed node includes multiple central processing units 
(CPUs), can cause system performance to degrade. 
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SUMMARY 

[0006] Provided are a method, system, and article of manufacture, wherein a plurality of 
processing nodes in a storage system are partitioned into a plurality of logical processing 
units, and wherein the plurality of logical processing units can respond to I/O requests 
5 from a host coupled to the storage system. At least two logical processing units are 
grouped, wherein data in a first storage coupled to a first logical processing unit of the 
least two logical processing units is mirrored by data in a second storage coupled to the 
second logical processing unit of the at least two logical processing units. In response to a 
failure of the first logical processing unit, an I/O request from the host is responded to via 

10 the second logical processing unit. 

[0007] In further embodiments, the storage system has at least two processing nodes, 
wherein the plurality of logical processing units are distributed across the at least two 
processing nodes, wherein one processing node includes a plurality of central processing 
units, and wherein in the event of the failure of the first logical processing unit, the 

1 5 plurality of processing nodes stay operational. 

[0008] In additional embodiments, an administrative console is coupled to the plurality 
of processing nodes of the storage system. Information on processing requirements, 
memory requirements and host bus adapter requirements for the plurality of logical 
processing units are processed at the administrative console prior to partitioning, 

20 [0009] In yet additional embodiments, one or more partitioning applications are coupled 
to the plurality of logical processing units. In response to grouping the at least two 
logical processing units, initial program load of the first logical processing unit is started. 
The one or more partitioning applications determine an identification of the second 
logical processing unit grouped with the first logical processed unit. The one or more 

25 partitioning applications present common resources to the first and second logical 
processing units. 

[0010] In further embodiments, a request for memory access of a logical processing unit 
is received from the first logical processing unit. One or more partitioning applications 
coupled to the plurality of logical processing units determine whether the logical 
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processing unit is grouped with the first logical processing unit. If the logical processing 
unit is grouped with the first logical processing unit, then the memory access of the 
logical processing unit is allowed to the first logical processing unit. If the logical 
processing unit is not grouped with the first logical processing unit, then the memory 
5 access of the logical processing unit is prevented to the first logical processing unit. 
[0011] In still further embodiments, a write request is received from the host to the 
plurality of processing nodes in the storage system. One or more partitioning applications 
write data corresponding to the write request to the first storage coupled to the first 
logical processing unit and the second storage coupled to the second logical processing 
10 unit. 

[0012] In yet additional implementations, a read request is received from the host to the 
plurality of processing nodes in the storage system. One or more partitioning applications 
read data corresponding to the read request from the first storage coupled to the first 
logical processing unit. 

1 5 [0013] In further implementations, the partitioning and grouping are performed by one 
or more partitioning applications coupled to the plurality of processing nodes, wherein the 
one or more partitioning applications comprise a hypervisor application of a redundant 
system. 

[0014] The implementations create a plurality of logical processing units from a plurality 
20 of processing nodes in a storage system. A pair of logical processing units form a 
redundant system, where if logical processing unit is unavailable, the other logical 
processing unit may be used to substitute the unavailable logical processing unit. In 
certain embodiments, in the event of a failure of a logical processing unit, the processing 
node that includes the failed logical processing unit continues to operate. 

25 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0015] Referring now to the drawings in which like reference numbers represent 
corresponding parts throughout: 
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FIG. 1 illustrates a block diagram of a computing environment, in accordance 
with certain described aspects of the invention; 

FIG. 2 illustrates a block diagram of partner virtual machines, in accordance with 
certain described implementations of the invention; 
5 FIG. 3 illustrates logic for implementing partner virtual machines, in accordance 

with certain described implementations of the invention; 

FIG. 4 illustrates logic for initial program load of partner virtual machines, in 
accordance with certain described implementations of the invention; 

FIG. 5 illustrates logic for providing security for memory access in partner virtual 
machines, in accordance with certain described implementations of the invention; 
5 FIG. 6 illustrates logic for providing security for reinitializing partner virtual 

machines, in accordance with certain described implementations of the invention; 

FIG. 7 illustrates logic for processing reads, writes, and failures in partner virtual 
machines, in accordance with certain described implementations of the invention; and 

FIG. 8 illustrates a block diagram of a computer architecture in which certain 
10 described aspects of the invention are implemented. 

DETAILED DESCRIPTION 
[0016] In the following description, reference is made to the accompanying drawings 
which form a part hereof and which illustrate several implementations. It is understood 

15 that other implementations may be utilized and structural and operational changes may be 
made without departing from the scope of the present implementations. 
[0017] FIG. 1 illustrates a block diagram of a computing environment, in accordance 
with certain described aspects of the invention. A storage system, such as an ESS unit 100 
is coupled to at least one host 102 via one more host bus adapters 104a... 104m. The ESS 

20 unit 100 is also coupled to an administrative console 106. 

[0018] The ESS unit 100 may include two nodes 108, 1 10, where a node may be a 
processing node, such as, a computational unit. A node may have one or more central 
CPUs and may be partitioned into one or more logical processing units, such as, virtual 
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machines, by a partitioning application. For example, the node 108 may have one or more 
CPUs 1 12, and the node 108 may be partitioned into the virtual machines 1 14a... 1 14n by 
a partitioning application 1 16. Similarly, the node 1 10 may have one or more CPUs 118, 
and the node 1 10 may be partitioned into virtual machines 120a... 120n by a partitioning 
5 application 122. A virtual machine, such as virtual machines 1 14a... 1 14n, 120a... 120n, 
may appear as computational unit to the host 102. 

[0019J While the ESS unit 100 is shown as including two nodes 108 and 1 10, in 
alternative embodiments the ESS unit 100 may include a fewer or a larger number of 
nodes. For example, in certain embodiments the ESS unit 100 may comprise of only one 

10 node partitioned into a plurality of virtual machines, and in certain embodiments the ESS 
unit 100 may comprise of three nodes where the nodes may be partitioned into one or 
more virtual machines. In alternative embodiments, instead of the ESS unit 100, other 
computational or storage systems may be used, where the other computational or storage 
systems are partitioned into a plurality of virtual machines. 

15 [0020] In certain embodiments, the host 102, and the nodes 108, 110 may be a device 
such as a personal computer, a workstation, a server, a mainframe, a hand held computer, 
a palm top computer, a telephony device, network appliance, etc. The host 102 may 
include any operating system (not shown), such as the IBM OS/390* operating system. 
The host 102 may also include at least one host application 124 that sends Input/Output 

20 (I/O) requests to the ESS unit 100. 

[0021] The host bus adapters 104a... 104m operate over Enterprise System Connection 
(ESCON)* channels or any other data interface mechanism (e.g., fibre channel, Storage 
Area Network (SAN) interconnections, etc.) and may allow communication between the 
host 102 and the plurality of virtual machines 1 14a... 1 14n, 120a... 120n. For example, in 

25 certain embodiments, the host bus adapter 104a may allow the host 102 to communicate 
with the virtual machines 1 14a, 120a, and the host bus adapter 104b may allow the host 
102 to communicate with the virtual machines 1 14b, 120b. 

[0022] The administrative console 106, may be a device, such as a personal computer, a 
workstation, a server, a mainframe, a hand held computer, a palm top computer, a 
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telephony device, network appliance, etc., that is used to administer the ESS unit 100. In 
certain embodiments, the administrative console 106 may include an administrative 
application 126 that is used to configure the ESS unit 100. 
[0023] Therefore, FIG. 1 illustrates a computing environment where the host 
5 application 124 sends I/O requests to the ESS unit 100. The ESS unit 100 maintains a 
redundant system to satisfy the I/O requests by grouping the virtual machines into pairs, 
i.e., partners. If one virtual machine of a pair is unavailable to satisfy the I/O requests, 
then the other virtual machine of the pair can satisfy the I/O requests. 
[0024] FIG. 2 illustrates a block diagram of partner virtual machines 200a... 200n, in 

10 accordance with certain described implementations of the invention. Partner virtual 

machines, such as, partner virtual machines 200a, may include two virtual machines. For 
example, in certain embodiments partner virtual machines 200a include virtual machines 
1 14a and 120a, partner virtual machines 200b include virtual machines 1 14b and 120b, 
and partner virtual machines 200n include virtual machines 1 14n and 120n. Therefore, 

1 5 partner virtual machines may include a virtual machine from node 108 and another virtual 
machine from node 110. 

[0025] Partner virtual machines are comprised of two virtual machines, where a virtual 
machine may be referred to as a partner of the other virtual machine. For example, partner 
virtual machines 200b are comprised of virtual machines 1 14b and 120b. Therefore, 

20 virtual machine 1 14b is a partner virtual machine of virtual machine 120b and vice versa. 
[0026] Data in a first storage coupled to a first virtual machine of partner virtual 
machines is mirrored by data in a second storage coupled to a second virtual machine of 
the partner virtual machines. For example, data in storage of virtual machine 1 14a may be 
mirrored by data in storage of virtual machine 120a. The first virtual machine may be 

25 referred to as a primary virtual machine and the second virtual machine may be referred 
to as a secondary virtual machine. The virtual machines can respond to I/O requests from 
the host 102, sent by the host application 124 via the host bus adapters 104a... 104m to the 
ESS unit 100. 
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[0027] Therefore, FIG. 2 illustrates how partner virtual machines 200a... 200n are set up 
within the ESS unit 100. The partner virtual machines create a redundant system, wherein 
if one virtual machine fails the other virtual machine included in the partner machines can 
substitute the failed virtual machine. 
5 [0028] FIG. 3 illustrates logic for implementing the partner virtual machines 

200a.. .200n, in accordance with certain described implementations of the invention. The 
logic of FIG. 3 is implemented by the administrative application 126 and the one or more 
partitioning applications 1 16, 122. In certain alternative embodiments, the partitioning 
applications 1 16, 122 or elements of the partitioning applications 116, 122 may also 
10 reside in the host bus adapters 104a... 104m. Although, the embodiments illustrate two 
partitioning application 116, 122 there may be fewer or more partitioning applications. 
Additionally, the two partitioning applications 1 16 and 122 may be combined or referred 
to as a single partitioning application, such as, a hypervisor. 

[0029] Control starts at block 300, where the administrative application 126 on the 
1 5 administrative console 1 06 processes data on CPU requirements, memory requirements, 
host bus adapter requirements, etc., for virtual machines in the nodes 108, 1 10. In certain 
embodiments, such data on CPU requirements, memory requirements, host bus 
requirements, etc., may be entered by configuration files created by a user on the 
administrative console 106 or entered directly by the user. 
20 [0030] Based on the data on CPU requirements, memory requirements, host bus 
requirements, etc., the partitioning applications 1 16, 122 define (at block 302) the 
plurality of virtual machines 1 14a... 1 14n, 120a.. .120n for the nodes 108, 1 10. For 
example, the partitioning application 1 16 may define the plurality of virtual machines 
1 14a... 11 4n for the node 108 and the partitioning application 122 may define the plurality 
25 of virtual machines 120a... 120n for the node 110. 

[0031] The partitioning applications 1 16, 122 associate (at block 304) a pool number 
with the virtual machines in a node. For example, the partitioning application 1 16 may 
associate pool numbers that numerically range from 1 to n, for virtual machines 
1 14a... 1 14n in node 108. The partitioning application 122 may associate the same pool 
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numbers that numerically range from 1 to n, for virtual machines 120a... 120n in node 
110. 

[0032] The partitioning applications 1 16, 122 assign (at block 306) virtual machines 
with the same pool number in either nodes 108, 1 10 to be partner virtual machines. For 
5 example, if pool number one has been associated with virtual machines 1 14a and 120a, 
then virtual machines 1 14a and 120a are assigned to be partner virtual machines, such as 
partner virtual machines 200a. 

[0033] Therefore, the logic of FIG. 3 illustrates how the partitioning applications 1 16, 
122 in association with the administrative application create partner virtual machines 

10 200a.. .200n within the ESS unit 100. 

[0034] FIG. 4 illustrates logic for initial program load (IPL) of partner virtual machines 
200a... 200n, in accordance with certain described implementations of the invention. In 
certain embodiments, the logic for initial program load may be implemented in the 
partitioning applications 116, 122. 

15 [0035] Control starts at block 400, where the partitioning applications 1 16, 122 start the 
IPL for a virtual machine, such as, virtual machine 1 14a... 1 14n, 120a... 120n. The 
partitioning applications 116, 122 provide (at block 402) the identification and 
destination of the partner virtual machine to the virtual machine that is undergoing IPL. 
For example, if the virtual machine 1 14a is undergoing IPL, then the identification and 

20 destination of the partner virtual machine 120a is provided to the virtual machines 1 14a. 
[0036] The partitioning applications 1 16, 122 determine (at block 404) if IPL is to be 
performed for anymore virtual machines. If not, the partitioning applications 1 16, 122 
present (at block 406) common resources, such as shared adapters including host bus 
adapters 104a.. 104m, to the virtual machines in partnership and the process for IPL stops 

25 (at block 408). For example, in certain embodiments, the partitioning applications 1 16, 
122 may present the host bus adapter 104a to be shared between the virtual machines 
1 14a and 120a, and the host bus adapter 104b to be shared between the virtual machines 
114b and 120b. 
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[0037] If the partitioning applications 1 16, 122 determine (at block 404) that IPL has to 
be performed for more virtual machines, then control returns to block 400 where the 
partitioning applications 1 16, 122 initiate IPL for additional virtual machines. 
[0038] Therefore, the logic of FIG. 4 illustrates how the partitioning applications 116, 
5 122 during IPL present common resources to all virtual machines in partnership. For 
example, the virtual machines 1 14a, 1 14b may be presented with common resources, such 
as, host bus adapter 104a, to communicate to the host 102. 

[0039] FIG. 5 illustrates logic for providing security for memory access in partner 
virtual machines 200a.. .200n, in accordance with certain described implementations of 

10 the invention. In certain embodiments, the logic for providing security for memory 
access maybe implemented in the partitioning applications 116, 122. 
[0040] Control starts at block 500, where a virtual machine that may be referred to as a 
requestor virtual machine, requests memory access from another virtual machine. For 
example, requestor virtual machines 1 14a may request memory access from virtual 

15 machine 120a. The partitioning applications 1 16, 122 determine (at block 502) if the 

another virtual machine whose memory access is requested is a partner virtual machine of 
the requestor virtual machine. If so, then the partitioning applications 1 16, 122 allow (at 
block 504) memory access of the another virtual machine to the requestor virtual 
machine. For example, if the requestor virtual machine is 1 14a requests memory access 

20 from the partner virtual machine 120a the memory access is allowed. 

[0041] If the partitioning applications 1 16, 122 determine (at block 502) that the 
another virtual machine whose memory access is requested is not a partner virtual 
machine of the requestor virtual machine then the partitioning applications 116, 122 does 
not allow the memory access and returns (at block 506) an error. 

25 [0042] Therefore, FIG. 5 illustrates how the partitioning applications 116, 122 allow 
memory access requests between virtual machines that are partners of each other. In 
certain alternative embodiments, only certain memory accesses may be allowed even 
between virtual machines that are partners. 
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[0043] FIG. 6 illustrates logic for providing security for reinitializing program load in 
partner virtual machine 200a... 200n, in accordance with certain described 
implementations of the invention. In certain embodiments, the logic for providing 
security for reinitializing program load in partner virtual machines may be implemented 
5 in the partitioning applications 116, 122. 

[0044] Control starts at block 600, where a virtual machine that may be referred to as a 
requestor virtual machine, generates a request for reinitializing program load for another 
virtual machine. For example, requestor virtual machine 1 14a may request a reinitialized 
program load for virtual machine 120a. The partitioning applications 116, 122 determine 

10 (at block 602) if the another virtual machine whose reinitialized program load is 
requested is a partner virtual machine of the requestor virtual machine. If so, then the 
partitioning applications 116, 122 allow (at block 604) the reinitialized program load of 
the another virtual machine to be controlled from the requestor virtual machine. For 
example, if the requestor virtual machine 1 14a requests reinitialized program load for the 

15 partner virtual machine 120a, then the reinitialized program load is allowed. 

[0045] If the partitioning applications 116, 122 determine (at block 602) that the 
another virtual machine whose reinitialized program load is requested is not a partner 
virtual machine of the requestor virtual machine then the partitioning applications 1 16, 
122 do not allow the reinitialized program load and return (at block 606) an error. 

20 [0046] Therefore, FIG. 6 illustrates how the partitioning applications 116, 122 allow a 
reinitialized program load between virtual machines that are partners of each other. In 
certain alternative embodiments, a shutdown request of another virtual machine from a 
requestor virtual machine operates in a similar manner. 

[0047] FIG. 7 illustrates logic for processing reads, writes, and failures in partner virtual 
25 machines 200a.. .200n, in accordance with certain described implementations of the 

invention. In certain embodiments, the logic for providing the processing of reads, writes, 
and failures in partner virtual machines 200a.. .200n maybe implemented in the 
partitioning applications 116, 122. 
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[0048] Control starts at block 700, where the partitioning applications 116, 122 receive 
a notification of an event. The partitioning applications 116, 122 determine (at block 702) 
the type of the received event notification. 

[0049] If the determined event is a write request, then the partitioning applications 116, 
5 122 write (at block 704) data corresponding to the write request to a virtual machine and 
a partner of the virtual machine. For example, in response to a write request the 
partitioning applications 116, 122 may write data corresponding to the write request to 
virtual machines 1 14a and 120a that are partner virtual machines. 
[0050] If the determined event is a read request, then the partitioning applications 1 16, 

10 1 22 read (at block 706) data corresponding to the read request from the primary virtual 
machine of the partner virtual machines. For example, if virtual machine 1 14a is 
designated as a primary virtual machine and the data in storage of virtual machine 1 14a is 
mirrored in secondary virtual machine 120a, then the partitioning applications 116, 122 
read data corresponding to the read request from the virtual machine 1 14a. 

15 [0051] If the determined event is a failure event of a primary virtual machine, then the 
partitioning applications 1 16, 122 cause (at block 708) the partner of the failed primary 
virtual machine to take over the task of satisfying requests from the host 102. In certain 
embodiments, the nodes 108, 110 and the virtual machines except for failed virtual 
machine keep (at block 710) operating. 

20 [0052] Therefore, FIG. 7 illustrates how the partitioning applications 1 16, 122 handle 
read operations, write operations, and failures of a virtual machine. In certain 
embodiments, in the event of a failure of a virtual machine, the node that includes the 
failed virtual machine does not cease to operate. 

[0053] The implementations create a plurality of logical processing units, i.e., virtual 
25 machines, from a plurality of processing nodes. A pair of logical processing units form a 
redundant system, where if a logical processing unit is unavailable, the other logical 
processing unit may be used to substitute the unavailable logical processing unit. In 
certain embodiments, the processing node that includes the unavailable logical processing 
unit continues to operate. Therefore, the unavailability of a logical processing unit does 
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20 



not lead to shutdown of a processing node. Furthermore, logical processing units that are 
partners appear identical to the host. So the failure of one logical processing unit may not 
be apparent to the host, as the system may keep on functioning with the partner logical 
processing unit assuming the functions of the failed logical processing unit. 



[0054] The described techniques may be implemented as a method, apparatus or article 
of manufacture using standard programming and/or engineering techniques to produce 
software, firmware, hardware, or any combination thereof. The term "article of 
manufacture" as used herein refers to code or logic implemented in hardware logic (e.g., 
an integrated circuit chip, Programmable Gate Array (PGA), Application Specific 
Integrated Circuit (ASIC), etc.) or a computer readable medium (e.g., magnetic storage 
medium, such as hard disk drives, floppy disks, tape), optical storage (e.g., CD-ROMs, 
optical disks, etc.), volatile and non-volatile memory devices (e.g., EEPROMs, ROMs, 
PROMs, RAMs, DRAMs, SRAMs, firmware, programmable logic, etc.). Code in the 
computer readable medium is accessed and executed by a processor. The code in which 
implementations are made may further be accessible through a transmission media or 
from a file server over a network. In such cases, the article of manufacture in which the 
code is implemented may comprise a transmission media, such as a network transmission 
line, wireless transmission media, signals propagating through space, radio waves, 
infrared signals, etc. Of course, those skilled in the art will recognize that many 
modifications may be made to this configuration without departing from the scope of the 
implementations, and that the article of manufacture may comprise any information 
bearing medium known in the art. 

[0055] FIG. 8 illustrates a block diagram of a computer architecture in which certain 
aspects of the invention are implemented. FIG. 8 illustrates one implementation of the 
host 102, the administrative console 106, and the nodes 108, 110. The host 102, the 
administrative console 106, and the nodes 108, 110 may implement a computer 
architecture 800 having a processor 802, a memory 804 (e.g., a volatile memory device), 
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and storage 806 (e.g., anon-volatile storage, magnetic disk drives, optical disk drives, 
tape drives, etc.). The storage 806 may comprise an internal storage device, an attached 
storage device or a network accessible storage device. Programs in the storage 806 may 
be loaded into the memory 804 and executed by the processor 802 in a manner known in 
5 the art. The architecture may further include a network card 808 to enable 

communication with a network. The architecture may also include at least one input 810, 
such as a keyboard, a touchscreen, a pen, voice-activated input, etc., and at least one 
output 812, such as a display device, a speaker, a printer, etc. 

[0056] The logic of FIGs. 3, 4, 5, 6 and 7 describe specific operations occurring in a 

10 particular order. Further, the operations may be performed in parallel as well as 
sequentially. In alternative implementations, certain of the logic operations may be 
performed in a different order, modified or removed and still implement implementations 
of the present invention. Morever, steps may be added to the above described logic and 
still conform to the implementations. Yet further steps may be performed by a single 

1 5 process or distributed processes. 

[0057] Many of the software and hardware components have been described in separate 
modules for purposes of illustration. Such components may be integrated into a fewer 
number of components or divided into a larger number of components. Additionally, 
certain operations described as performed by a specific component may be performed by 

20 other components. 

[0058] Therefore, the foregoing description of the implementations has been presented 
for the purposes of illustration and description. It is not intended to be exhaustive or to 
limit the invention to the precise form disclosed. Many modifications and variations are 
possible in light of the above teaching. It is intended that the scope of the invention be 

25 limited not by this detailed description, but rather by the claims appended hereto. The 
above specification, examples and data provide a complete description of the manufacture 
and use of the composition of the invention. Since many implementations of the 
invention can be made without departing from the spirit and scope of the invention, the 
invention resides in the claims hereinafter appended. 
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